Question 6

What can an engineer use with GlobalProtect to distribute user-specific client certificates to each GlobalProtect user?
  • Question 7

    An engineer is in the planning stages of deploying User-ID in a diverse directory services environment.
    Which server OS platforms can be used for server monitoring with User-ID?
  • Question 8

    Refer to the image.

    An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs to change the IP address to a preferable server for this template stack but cannot impact other template stacks.
    How can the issue be corrected?
  • Question 9

    An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However, this network segment cannot access the dedicated management interface due to the Security policy.
    Without changing the existing access to the management interface, how can the engineer fulfill this request?
  • Question 10

    Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.
    In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

    A)

    B)

    C)

    D)